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1 Introduction to Multiboot2 Specification 


This chapter describes some rough information on the Multiboot2 Specification. Note that 
this is not a part of the specification itself. 


1.1 The background of Multiboot2 Specification 


Every operating system ever created tends to have its own boot loader. Installing a new 
operating system on a machine generally involves installing a whole new set of boot mech- 
anisms, each with completely different install-time and boot-time user interfaces. Getting 
multiple operating systems to coexist reliably on one machine through typical chaining 
mechanisms can be a nightmare. There is little or no choice of boot loaders for a particular 
operating system — if the one that comes with the operating system doesn’t do exactly 
what you want, or doesn’t work on your machine, you’re screwed. 


While we may not be able to fix this problem in existing proprietary operating sys- 
tems, it shouldn’t be too difficult for a few people in the free operating system communities 
to put their heads together and solve this problem for the popular free operating systems. 
That’s what this specification aims for. Basically, it specifies an interface between a boot 
loader and a operating system, such that any complying boot loader should be able to 
load any complying operating system. This specification does not specify how boot loaders 
should work — only how they must interface with the operating system being loaded. 


1.2 The target architecture 


This specification is primarily targeted at PC, since they are the most common and have the 
largest variety of operating systems and boot loaders. However, to the extent that certain 
other architectures may need a boot specification and do not have one already, a variation 
of this specification, stripped of the x86-specific details, could be adopted for them as well. 


1.3 The target operating systems 


This specification is targeted toward free 32-bit operating systems that can be fairly easily 
modified to support the specification without going through lots of bureaucratic rigmarole. 
The particular free operating systems that this specification is being primarily designed for 
are Linux, the kernels of FreeBSD and NetBSD, Mach, and VSTa. It is hoped that other 
emerging free operating systems will adopt it from the start, and thus immediately be able 
to take advantage of existing boot loaders. It would be nice if proprietary operating system 
vendors eventually adopted this specification as well, but that’s probably a pipe dream. 


1.4 Boot sources 


It should be possible to write compliant boot loaders that load the OS image from a variety 
of sources, including floppy disk, hard disk, and across a network. 


Disk-based boot loaders may use a variety of techniques to find the relevant OS image 
and boot module data on disk, such as by interpretation of specific file systems (e.g. the 
BSD/Mach boot loader), using precalculated blocklists (e.g. LILO), loading from a special 
boot partition (e.g. OS/2), or even loading from within another operating system (e.g. the 
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VSTa boot code, which loads from DOS). Similarly, network-based boot loaders could use 
a variety of network hardware and protocols. 


It is hoped that boot loaders will be created that support multiple loading mecha- 
nisms, increasing their portability, robustness, and user-friendliness. 


1.5 Configure an operating system at boot-time 


It is often necessary for one reason or another for the user to be able to provide some 
configuration information to an operating system dynamically at boot time. While this 
specification should not dictate how this configuration information is obtained by the boot 
loader, it should provide a standard means for the boot loader to pass such information to 
the operating system. 


1.6 How to make OS development easier 


OS images should be easy to generate. Ideally, an OS image should simply be an ordinary 
32-bit executable file in whatever file format the operating system normally uses. It should 
be possible to nm or disassemble OS images just like normal executables. Specialized tools 
should not be required to create OS images in a special file format. If this means shifting 
some work from the operating system to a boot loader, that is probably appropriate, because 
all the memory consumed by the boot loader will typically be made available again after 
the boot process is created, whereas every bit of code in the OS image typically has to 
remain in memory forever. The operating system should not have to worry about getting 
into 32-bit mode initially, because mode switching code generally needs to be in the boot 
loader anyway in order to load operating system data above the 1MB boundary, and forcing 
the operating system to do this makes creation of OS images much more difficult. 


Unfortunately, there is a horrendous variety of executable file formats even among 
free Unix-like PC-based operating systems — generally a different format for each operating 
system. Most of the relevant free operating systems use some variant of a.out format, but 
some are moving to ELF. It is highly desirable for boot loaders not to have to be able to 
interpret all the different types of executable file formats in existence in order to load the 
OS image — otherwise the boot loader effectively becomes operating system specific again. 


This specification adopts a compromise solution to this problem. Multiboot2- 
compliant OS images always contain a magic Multiboot2 header (see Section 3.1 [OS 
image format], page 5), which allows the boot loader to load the image without having 
to understand numerous a.out variants or other executable formats. This magic header 
does not need to be at the very beginning of the executable file, so kernel images can still 
conform to the local a.out format variant in addition to being Multiboot2-compliant. 


1.7 Boot modules 


Many modern operating system kernels, such as Mach and the microkernel in VSTa, do 
not by themselves contain enough mechanism to get the system fully operational: they 
require the presence of additional software modules at boot time in order to access devices, 
mount file systems, etc. While these additional modules could be embedded in the main 
OS image along with the kernel itself, and the resulting image be split apart manually by 
the operating system when it receives control, it is often more flexible, more space-efficient, 
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and more convenient to the operating system and user if the boot loader can load these 
additional modules independently in the first place. 


Thus, this specification should provide a standard method for a boot loader to indi- 
cate to the operating system what auxiliary boot modules were loaded, and where they can 
be found. Boot loaders don’t have to support multiple boot modules, but they are strongly 
encouraged to, because some operating systems will be unable to boot without them. 
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2 The definitions of terms used through the 
specification 


must 


should 


may 


boot loader 


We use the term must, when any boot loader or OS image needs to follow a 
rule — otherwise, the boot loader or OS image is not Multiboot2-compliant. 


We use the term should, when any boot loader or OS image is recommended 
to follow a rule, but it doesn’t need to follow the rule. 


We use the term may, when any boot loader or OS image is allowed to follow 
a rule. 


Whatever program or set of programs loads the image of the final operating 
system to be run on the machine. The boot loader may itself consist of several 
stages, but that is an implementation detail not relevant to this specification. 
Only the final stage of the boot loader — the stage that eventually transfers 
control to an operating system — must follow the rules specified in this doc- 
ument in order to be Multiboot2-compliant; earlier boot loader stages may be 
designed in whatever way is most convenient. 


OS image, kernel 


The initial binary image that a boot loader loads into memory and transfers 
control to start an operating system. The OS image is typically an executable 
containing the operating system kernel. However it doesn’t need to be a part 
of any OS and may be any kind of system tool. 


boot module 


Other auxiliary files that a boot loader loads into memory along with an OS 
image, but does not interpret in any way other than passing their locations to 
the operating system when it is invoked. 


Multiboot2-compliant 


u8 
ul6 


u32 


u64 


A boot loader or an OS image which follows the rules defined as must is 
Multiboot2-compliant. When this specification specifies a rule as should or 
may, a Multiboot2-complaint boot loader/OS image doesn’t need to follow the 
rule. 


The type of unsigned 8-bit data. 


The type of unsigned 16-bit data. Because the target architecture is little- 
endian, ul6 is coded in little-endian. 


The type of unsigned 32-bit data. Because the target architecture is little- 
endian, u32 is coded in little-endian. 


The type of unsigned 64-bit data. Because the target architecture is little- 
endian, u64 is coded in little-endian. 


Chapter 3: The exact definitions of Multiboot2 Specification 5 


3 The exact definitions of Multiboot2 
Specification 


There are three main aspects of a boot loader/OS image interface: 
1. The format of an OS image as seen by a boot loader. 
2. The state of a machine when a boot loader starts an operating system. 


3. The format of information passed by a boot loader to an operating system. 


3.1 OS image format 


An OS image may be an ordinary 32-bit executable file in the standard format for that 
particular operating system, except that it may be linked at a non-default load address to 
avoid loading on top of the Pc’s I/O region or other reserved areas, and of course it should 
not use shared libraries or other fancy features. 


An OS image must contain an additional header called Multiboot2 header, besides 
the headers of the format used by the OS image. The Multiboot2 header must be contained 
completely within the first 32768 bytes of the OS image, and must be 64-bit aligned. In 
general, it should come as early as possible, and may be embedded in the beginning of the 
text segment after the real executable header. 


3.1.1 The layout of Multiboot2 header 
The layout of the Multiboot2 header must be as follows: 


Offset Type Field Name Note 

0 u32 magic required 
4 u32 architecture required 
8 u32 header_length required 
12 u32 checksum required 
16-XX tags required 


The fields ‘magic’, ‘architecture’, ‘header_length’ and ‘checksum’ are defined in 
Section 3.1.2 [Header magic fields], page 5, ‘tags’ are defined in Section 3.1.3 [Header tags], 
page 6. All fields are in native endianness. On bi-endian platforms native-endianness means 
the endiannes OS image starts in. 


3.1.2 The magic fields of Multiboot2 header 


‘magic’ The field ‘magic’ is the magic number identifying the header, which must be 
the hexadecimal value 0xE85250D6. 


‘architecture’ 
The field ‘architecture’ specifies the Central Processing Unit Instruction Set 
Architecture. Since ‘magic’ isn’t a palindrome it already specifies the endian- 
ness ISAs differing only in endianness recieve the same ID. ‘0’ means 32-bit 
(protected) mode of i386. ‘4’ means 32-bit MIPS. 


‘header_length’ 
The field ‘header_length’ specifies the Length of Multiboot2 header in bytes 
including magic fields. 


6 Multiboot2 Specification version 2.0 


‘checksum’ 
The field ‘checksum’ is a 32-bit unsigned value which, when added to the other 
magic fields (i.e. ‘magic’, ‘architecture’ and ‘header_length’), must have a 
32-bit unsigned sum of zero. 


3.1.3 General tag structure 


Tags constitutes a buffer of structures following each other padded when necessary in order 
for each tag to start at 8-bytes aligned address. Tags are terminated by a tag of type ‘0’ 
and size ‘8’. Every structure has following format: 


$------------------- + 
u16 | type | 
uié6 | flags | 
u32 | size | 

$------------------- + 


‘type’ is divided into 2 parts. Lower contains an identifier of contents of the rest of 
the tag. ‘size’ contains the size of tag including header fields. If bit ‘0’ of ‘flags’ (also 
known as ‘optional’) is set, the bootloader may ignore this tag if it lacks relevant support. 
Tags are terminated by a tag of type ‘0’ and size ‘8’. 


3.1.4 Multiboot2 information request 


$------------------- + 
ui6 | type = 1 | 
uié6 | flags | 
u32 | size | 
u32[n] | mbi_tag_types | 

$------------------- + 


‘mbi_tag_types’ is an array of u32’s, each one representing an information request. 


If this tag is present and ‘optional’ is set to ‘0’, the bootloader must support the 
requested tag and be able to provide relevant information to the image if it is available. If 
the bootloader does not understand the meaning of the requested tag it must fail with an 
error. However, if it supports a given tag but the information conveyed by it is not available 
the bootloader does not provide the requested tag in the Multiboot2 information structure 
and passes control to the loaded image as usual. 


Note: The above means that there is no guarantee that any tags of type 
‘mbi_tag_types’ will actually be present. E.g. on a videoless system even if you requested 
tag ‘8’ and the bootloader supports it, no tags of type ‘8’ will be present in the Multiboot2 
information structure. 


Chapter 3: The exact definitions of Multiboot2 Specification 7 


3.1.5 The address tag of Multiboot2 header 


ul6 
ul6 
u32 
u32 
u32 
u32 
u32 


load_addr 
load_end_addr 


| | 
| | 
| | 
| header_addr | 
| | 
| | 
| bss_end_addr | 


All of the address fields in this tag are physical addresses. The meaning of each is 


as follows: 


header_addr 


load_addr 


Contains the address corresponding to the beginning of the Multiboot2 header 
— the physical memory location at which the magic value is supposed to be 
loaded. This field serves to synchronize the mapping between OS image offsets 
and physical memory addresses. 


Contains the physical address of the beginning of the text segment. The offset 
in the OS image file at which to start loading is defined by the offset at which 
the header was found, minus (header_addr - load_addr). load_addr must be less 
than or equal to header_addr. 


Special value -1 means that the file must be loaded from its beginning. 


load_end_addr 


Contains the physical address of the end of the data segment. (load_end_addr 
- load_addr) specifies how much data to load. This implies that the text and 
data segments must be consecutive in the OS image; this is true for existing 
a.out executable formats. If this field is zero, the boot loader assumes that the 
text and data segments occupy the whole OS image file. 


bss_end_addr 


Contains the physical address of the end of the bss segment. The boot loader 
initializes this area to zero, and reserves the memory it occupies to avoid placing 
boot modules and other data relevant to the operating system in that area. If 
this field is zero, the boot loader assumes that no bss segment is present. 


Note: This information does not need to be provided if the kernel image is in ELF 
format, but it must be provided if the image is in a.out format or in some other format. 
When the address tag is present it must be used in order to load the image, regardless of 
whether an ELF header is also present. Compliant boot loaders must be able to load images 
that are either in ELF format or contain the address tag embedded in the Multiboot2 header. 
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3.1.6 The entry address tag of Multiboot2 header 


$------------------- + 
u16 | type = 3 | 
uié6 | flags | 
u32 | size | 
u32 | entry_addr | 

+------------------- + 


All of the address fields in this tag are physical addresses. The meaning of each is 
as follows: 


entry_addr 
The physical address to which the boot loader should jump in order to start 
running the operating system. 


3.1.7 EFI i386 entry address tag of Multiboot2 header 


+------------------- + 
u16 | type = 8 | 
uié6 | flags | 
u32 | size | 
u32 | entry_addr | 

$------------------- + 


All of the address fields in this tag are physical addresses. The meaning of each is 
as follows: 


entry_addr 
The physical address to which the boot loader should jump in order to start 
running EFI i386 compatible operating system code. 


This tag is taken into account only on EFT i386 platforms when Multiboot2 image 
header contains EFI boot services tag. Then entry point specified in ELF header and the 
entry address tag of Multiboot2 header are ignored. 


3.1.8 EFI amd64 entry address tag of Multiboot2 header 


+------------------- + 
u16 | type = 9 | 
ulé6 | flags | 
u32 | size | 
u32 | entry_addr | 

+------------------- + 


All of the address fields in this tag are physical addresses (paging mode is enabled 
and any memory space defined by the UEFI memory map is identity mapped, hence, vir- 
tual address equals physical address; Unified Extensible Firmware Interface Specification, 
Version 2.6, section 2.3.4, x64 Platforms, boot services). The meaning of each is as follows: 


entry_addr 
The physical address to which the boot loader should jump in order to start 
running EFI amd64 compatible operating system code. 
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This tag is taken into account only on EFI amd64 platforms when Multiboot2 image 
header contains EFI boot services tag. Then entry point specified in ELF header and the 
entry address tag of Multiboot2 header are ignored. 


3.1.9 Flags tag 


$------------------- + 
u16 | type = 4 | 
uié6 | flags | 
u32 | size = 12 | 
u32 | console_flags | 

$------------------- + 


If this tag is present and bit 0 of ‘console_flags’ is set at least one of supported 
consoles must be present and information about it must be available in mbi. If bit ‘1’ of 
‘console_flags’ is set it indicates that the OS image has EGA text support. 


3.1.10 The framebuffer tag of Multiboot2 header 


$------------------- + 
u16 | type = 5 | 
uié6 | flags | 
u32 | size = 20 | 
u32 | width | 
u32 | height | 
u32 | depth | 

$------------------- + 


This tag specifies the preferred graphics mode. If this tag is present bootloader 
assumes that the payload has framebuffer support. Note that that is only a recommended 
mode by the OS image. Boot loader may choose a different mode if it sees fit. 


The meaning of each is as follows: 
width Contains the number of the columns. This is specified in pixels in a graphics 


mode, and in characters in a text mode. The value zero indicates that the OS 
image has no preference. 


height Contains the number of the lines. This is specified in pixels in a graphics mode, 
and in characters in a text mode. The value zero indicates that the OS image 
has no preference. 


depth Contains the number of bits per pixel in a graphics mode, and zero in a text 
mode. The value zero indicates that the OS image has no preference. 


3.1.11 Module alignment tag 


$------------------- + 
u16 | type = 6 | 
uié6 | flags | 
u32 | size = 8 | 

$------------------- + 


If this tag is present modules must be page aligned. 
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3.1.12 EFI boot services tag 


$------------------- + 
u16 | type = 7 | 
ul6 | flags | 
u32 | size = 8 | 

$------------------- + 


This tag indicates that payload supports starting without terminating boot services. 


3.1.13 Relocatable header tag 


$------------------- + 
ul6 | type = 10 | 
ul6 | flags | 
u32 | size = 24 | 
u32 | min_addr | 
u32 | max_addr | 
u32 | align | 
u32 | preference | 

$------------------- + 


This tag indicates that image is relocatable. 


The meaning of each field is as follows: 


min_addr Lowest possible physical address at which image should be loaded. The boot- 
loader cannot load any part of image below this address. 


max_addr Highest possible physical address at which loaded image should end. The boot- 
loader cannot load any part of image above this address. 


align Image alignment in memory, e.g. 4096. 


preference 
It contains load address placement suggestion for boot loader. Boot loader 
should follow it. ‘0’ means none, ‘1’ means load image at lowest possible address 
but not lower than min_addr and ‘2’ means load image at highest possible 
address but not higher than max_addr. 


3.2 MIPS machine state 


When the boot loader invokes the operating system, the machine must have the following 
state: 


‘R4 (also known as AO)’ 
Must contain the magic value ‘0x36d76289’; the presence of this value indicates 
to the operating system that it was loaded by a Multiboot2-compliant boot 
loader (e.g. as opposed to another type of boot loader that the operating 
system can also be loaded from). 


‘R5 (also known as A1)’ 
Must contain the 32-bit physical address of the Multiboot2 information struc- 
ture provided by the boot loader (see Section 3.6 [Boot information format], 
page 12). 
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All other processor registers and flag bits are undefined. This includes, in particular: 


‘R29/SP’ ‘The OS image must create its own stack as soon as it needs one. 


3.3 1386 machine state 


When the boot loader invokes the 32-bit operating system, the machine must have the 
following state: 


‘EAX’ Must contain the magic value ‘0x36d76289’; the presence of this value indicates 
to the operating system that it was loaded by a Multiboot2-compliant boot 
loader (e.g. as opposed to another type of boot loader that the operating 
system can also be loaded from). 


‘EBX’ Must contain the 32-bit physical address of the Multiboot2 information struc- 
ture provided by the boot loader (see Section 3.6 [Boot information format], 
page 12). 

‘CS’ Must be a 32-bit read/execute code segment with an offset of ‘0’ and a limit of 


‘OxFFFFFFFF’. The exact value is undefined. 


‘DS’ 

‘ES’ 

‘FS’ 

‘gs’ 

‘Ss’ Must be a 32-bit read/write data segment with an offset of ‘0’ and a limit of 
‘OxFFFFFFFF’. The exact values are all undefined. 


‘A20 gate’ Must be enabled. 


‘CRO’ Bit 31 (PG) must be cleared. Bit 0 (PE) must be set. Other bits are all 
undefined. 

‘EFLAGS’ Bit 17 (VM) must be cleared. Bit 9 (IF) must be cleared. Other bits are all 
undefined. 


All other processor registers and flag bits are undefined. This includes, in particular: 
‘ESP’ The OS image must create its own stack as soon as it needs one. 


‘GDTR’ Even though the segment registers are set up as described above, the ‘GDTR’ 
may be invalid, so the OS image must not load any segment registers (even just 
reloading the same values!) until it sets up its own ‘GDT’. 


‘IDTR’ The OS image must leave interrupts disabled until it sets up its own IDT. 


On EFI system boot services must be terminated. 


3.4 EFI i386 machine state with boot services enabled 


When the boot loader invokes the 32-bit operating system on EFT i386 platform and EFI 
boot services tag together with EFI i386 entry address tag are present in the image Multi- 
boot2 header, the machine must have the following state: 
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‘FAX’ Must contain the magic value ‘0x36d76289’; the presence of this value indicates 
to the operating system that it was loaded by a Multiboot2-compliant boot 
loader (e.g. as opposed to another type of boot loader that the operating 
system can also be loaded from). 


‘EBX’ Must contain the 32-bit physical address of the Multiboot2 information struc- 
ture provided by the boot loader (see Section 3.6 [Boot information format}, 
page 12). 


All other processor registers, flag bits and state are set accordingly to Unified Ex- 
tensible Firmware Interface Specification, Version 2.6, section 2.3.2, [A-32 Platforms, boot 
services. 


3.5 EFI amd64 machine state with boot services enabled 


When the boot loader invokes the 64-bit operating system on EFI amd64 platform and 
EFI boot services tag together with EFI amd64 entry address tag are present in the image 
Multiboot2 header, the machine must have the following state: 


‘EAX’ Must contain the magic value ‘0x36d76289’; the presence of this value indicates 
to the operating system that it was loaded by a Multiboot2-compliant boot 
loader (e.g. as opposed to another type of boot loader that the operating 
system can also be loaded from). 


‘EBX’ Must contain the 64-bit physical address (paging mode is enabled and any 
memory space defined by the UEFI memory map is identity mapped, hence, 
virtual address equals physical address; Unified Extensible Firmware Interface 
Specification, Version 2.6, section 2.3.4, x64 Platforms, boot services) of the 
Multiboot2 information structure provided by the boot loader (see Section 3.6 
[Boot information format], page 12). 


All other processor registers, flag bits and state are set accordingly to Unified Ex- 
tensible Firmware Interface Specification, Version 2.6, section 2.3.4, x64 Platforms, boot 
services. 


The bootloader must not load any part of the kernel, the modules, the Multiboot2 
information structure, etc. higher than 4 GiB - 1. This requirement is put in force because 
most of currently specified tags supports 32-bit addresses only. Additionally, some kernels, 
even if they run on EFI 64-bit platform, still execute some parts of its initialization code in 
32-bit mode. 


Note: If at some point there is a need for full 64-bit mode support in Multiboot2 
protocol then it should be designed very carefully. Especially it should be taken into account 
that 32-bit and 64-bit mode code should coexist in an image without any issue. The image 
should have a chance to inform the bootloader that it supports full 64-bit mode. If it is the 
case then the bootloader should provide 64-bit tags if it is desired and possible. Otherwise 
32-bit tags should be used. 


3.6 Boot information 
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3.6.1 Boot information format 


Upon entry to the operating system, the EBX register contains the physical address of a 
Multiboot2 information data structure, through which the boot loader communicates vital 
information to the operating system. The operating system can use or ignore any parts of 
the structure as it chooses; all information passed by the boot loader is advisory only. 

The Multiboot2 information structure and its related substructures may be placed 
anywhere in memory by the boot loader (with the exception of the memory reserved for 
the kernel and boot modules, of course). It is the operating system’s responsibility to avoid 
overwriting this memory until it is done using it. 


3.6.2 Basic tags structure 


Boot information consists of fixed part and a series of tags. Its start is 8-bytes aligned. 
Fixed part is as following: 


u32 | total_size | 
u32 | reserved | 


‘total_size’ contains the total size of boot information including this field and 
terminating tag in bytes 

‘reserved’ is always set to zero and must be ignored by OS image 

Every tag begins with following fields: 


‘type’ contains an identifier of contents of the rest of the tag. ‘size’ contains the size 
of tag including header fields but not including padding. Tags follow one another padded 
when necessary in order for each tag to start at 8-bytes aligned address. Tags are terminated 
by a tag of type ‘0’ and size ‘8’. 


3.6.3 Basic memory information 


$------------------- + 
u32 | type = 4 | 
u32 | size = 16 | 
u32 | mem_lower | 
u32 | mem_upper | 


‘mem_lower’ and ‘mem_upper’ indicate the amount of lower and upper memory, re- 
spectively, in kilobytes. Lower memory starts at address 0, and upper memory starts at 
address 1 megabyte. The maximum possible value for lower memory is 640 kilobytes. The 
value returned for upper memory is maximally the address of the first upper memory hole 
minus 1 megabyte. It is not guaranteed to be this value. 

This tag may not be provided by some boot loaders on EFI platforms if EFI boot 
services are enabled and available for the loaded image (EFI boot services not terminated 
tag exists in Multiboot2 information structure). 
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3.6.4 BIOS Boot device 


+------------------- + 
u32 | type = 5 | 
u32 | size = 20 | 
u32 | biosdev | 
u32 | partition | 
u32 | sub_parition | 

$------------------- + 


This tag indicates which BIOs disk device the boot loader loaded the OS image from. 
If the OS image was not loaded from a BIOS disk, then this tag must not be present. The 
operating system may use this field as a hint for determining its own root device, but is not 
required to. 

The ‘biosdev’ contains the BIOS drive number as understood by the Blos INT 0x13 
low-level disk interface: e.g. 0x00 for the first floppy disk or 0x80 for the first hard disk. 

The three remaining bytes specify the boot partition. ‘partition’ specifies the top- 
level partition number, ‘sub_partition’ specifies a sub-partition in the top-level partition, 
etc. Partition numbers always start from zero. Unused partition bytes must be set to 
OxFFFFFFFF. For example, if the disk is partitioned using a simple one-level DOS parti- 
tioning scheme, then ‘partition’ contains the DOS partition number, and ‘sub_partition’ 
if OxFFFFFF. As another example, if a disk is partitioned first into DOS partitions, and then 
one of those DOS partitions is subdivided into several BSD partitions using BSD’s diskla- 
bel strategy, then ‘partition’ contains the DOS partition number and ‘sub_partition’ 
contains the BSD sub-partition within that DOS partition. 

DOS extended partitions are indicated as partition numbers starting from 4 and 
increasing, rather than as nested sub-partitions, even though the underlying disk layout of 
extended partitions is hierarchical in nature. For example, if the boot loader boots from the 
second extended partition on a disk partitioned in conventional DOS style, then ‘partition’ 
will be 5, and ‘sub_partiton’ will be O0xFFFFFFFF. 


3.6.5 Boot command line 


$------------------- + 
u32 | type = 1 | 
u32 | size | 
u8 [n] | string | 

$------------------- + 


‘string’ contains command line. The command line is a normal C-style zero- 
terminated UTF-8 string. 


3.6.6 Modules 


+------------------- + 
u32 | type = 3 | 
u32 | size | 
u32 | mod_start | 
u32 | mod_end | 
u8 [n] | string | 
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This tag indicates to the kernel what boot module was loaded along with the kernel 
image, and where it can be found. 

The ‘mod_start’ and ‘mod_end’ contain the start and end physical addresses of the 
boot module itself. The ‘string’ field provides an arbitrary string to be associated with that 
particular boot module; it is a zero-terminated UTF-8 string, just like the kernel command 
line. Typically the string might be a command line (e.g. if the operating system treats boot 
modules as executable programs), or a pathname (e.g. if the operating system treats boot 
modules as files in a file system), but its exact use is specific to the operating system. 


One tag appears per module. This tag type may appear multiple times. 
3.6.7 ELF-Symbols 


$------------------- + 
u32 | type = 9 | 
u32 | size | 
ul6 | num | 
uié6 | entsize | 
uié6 | shndx | 
uié6 | reserved | 
varies | section headers | 

po------------------ + 


This tag contains section header table from an ELF kernel, the size of each entry, 
number of entries, and the string table used as the index of names. They correspond 
to the ‘shdr_*’ entries (‘shdr_num’, etc.) in the Executable and Linkable Format (ELF) 
specification in the program header. All sections are loaded, and the physical address fields 
of the ELF section header then refer to where the sections are in memory (refer to the i386 
ELF documentation for details as to how to read the section header(s)). 


3.6.8 Memory map 


This tag provides memory map. 


$------------------- + 
u32 | type = 6 | 
u32 | size | 
u32 | entry_size | 
u32 | entry_version | 
varies | entries | 

$------------------- + 


‘entry_size’ contains the size of one entry so that in future new fields may be added 
to it. It’s guaranteed to be a multiple of 8. ‘entry_version’ is currently set at ‘0’. Future 
versions will increment this field. Future version are guranteed to be backward compatible 
with older format. Each entry has the following structure: 


4$------------------- + 
u64 | base_addr | 
u64 | length | 
u32 | type | 
u32 | reserved | 
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‘size’ contains the size of current entry including this field itself. It may be bigger 
than 24 bytes in future versions but is guaranteed to be ‘base_addr’ is the starting physical 
address. ‘length’ is the size of the memory region in bytes. ‘type’ is the variety of address 
range represented, where a value of 1 indicates available RAM, value of 3 indicates usable 
memory holding ACPI information, value of 4 indicates reserved memory which needs to 
be preserved on hibernation, value of 5 indicates a memory which is occupied by defective 
RAM modules and all other values currently indicated a reserved area. ‘reserved’ is set to 
‘0’ by bootloader and must be ignored by the OS image. 


The map provided is guaranteed to list all standard RAM that should be available 
for normal use. This type however includes the regions occupied by kernel, mbi, segments 
and modules. Kernel must take care not to overwrite these regions. 


This tag may not be provided by some boot loaders on EFI platforms if EFI boot 
services are enabled and available for the loaded image (EFI boot services not terminated 
tag exists in Multiboot2 information structure). 


3.6.9 Boot loader name 


$------------------- + 
u32 | type = 2 | 
u32 | size | 
u8 [n] | string | 

$------------------- + 


‘string’ contains the name of a boot loader booting the kernel. The name is a 
normal C-style UTF-8 zero-terminated string. 


3.6.10 APM table 
The tag type 10 contains APM table 


4---------------------- + 
u32 | type = 10 | 
u32 | size = 28 | 
ulé6 | version | 
ui6 | cseg | 
u32 | offset | 
ui6 | cseg_16 | 
u16 | dseg | 
uié6 | flags | 
ul6 | cseg_len | 
uié6 | cseg_16_len | 
ul6 | dseg_len | 

$---------------------- + 


The fields ‘version’, ‘cseg’, ‘offset’, ‘cseg_16’, ‘dseg’, ‘flags’, ‘cseg_len’, 
‘cseg_16_len’, ‘dseg_len’ indicate the version number, the protected mode 32-bit code 
segment, the offset of the entry point, the protected mode 16-bit code segment, the 
protected mode 16-bit data segment, the flags, the length of the protected mode 32-bit 
code segment, the length of the protected mode 16-bit code segment, and the length of 
the protected mode 16-bit data segment, respectively. Only the field ‘offset’ is 4 bytes, 
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and the others are 2 bytes. See Advanced Power Management (APM) BIOS Interface 
Specification, for more information. 


3.6.11 VBE info 


$o------------------ + 
u32 | type = 7 | 
u32 | size = 784 | 
ui6 | vbe_mode | 
ul6 | vbe_interface_seg | 
ui6 | vbe_interface_off | 
ui6 | vbe_interface_len | 
u8[512] | vbe_control_info | 
u8[256] | vbe_mode_info | 


The fields ‘vbe_control_info’ and ‘vbe_mode_info’ contain VBE control informa- 
tion returned by the VBE Function 00h and VBE mode information returned by the VBE 
Function 01h, respectively. 


The field ‘vbe_mode’ indicates current video mode in the format specified in VBE 3.0. 


The rest fields ‘vbe_interface_seg’, ‘vbe_interface_off’, and 
‘vbe_interface_len’ contain the table of a protected mode interface defined in 
VBE 2.0+. If this information is not available, those fields contain zero. Note that VBE 3.0 
defines another protected mode interface which is incompatible with the old one. If you 
want to use the new protected mode interface, you will have to find the table yourself. 


3.6.12 Framebuffer info 


4+-------------------- + 
u32 type = 8 
u32 size 
u64 framebuffer_addr 
u32 framebuffer_pitch 


| 
| 
| 
| 
u32 | framebuffer_width 
| 
| 
| 
| 
| 


u32 framebuffer_height 

us framebuffer_bpp 

us framebuffer_type 

us reserved 

varies color_info 
4$-------------------- + 


The field ‘framebuffer_addr’ contains framebuffer physical address. This field is 64- 
bit wide but bootloader should set it under 4GiB if possible for compatibility with payloads 
which aren’t aware of PAE or amd64. The field ‘framebuffer_pitch’ contains pitch in 
bytes. The fields ‘framebuffer_width’, ‘framebuffer_height’ contain framebuffer dimen- 
sions in pixels. The field ‘framebuffer_bpp’ contains number of bits per pixel. ‘reserved’ 
always contains 0 in current version of specification and must be ignored by OS image. If 
‘framebuffer_type’ is set to 0 it means indexed color. In this case color_info is defined as 
follows: 
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u32 | framebuffer_palette_num_colors | 
varies | framebuffer_palette | 


‘framebuffer_palette’ is an array of colour descriptors. Each colour descriptor has 
following structure: 


4$------------- + 
u8 | red_value | 
u8 | green_value | 
u8 | blue_value | 

4$------------- + 


If ‘framebuffer_type’ is set to ‘1’ it means direct RGB color. Then color_type is 
defined as follows: 


4+---------------------------------- + 
us | framebuffer_red_field_position | 
us | framebuffer_red_mask_size | 
us | framebuffer_green_field_position | 
us | framebuffer_green_mask_size | 
us | framebuffer_blue_field_position | 
us | framebuffer_blue_mask_size | 


If ‘framebuffer_type’ is set to ‘2’ it means EGA text. In this case 
‘framebuffer_width’ and ‘framebuffer_height’ are expressed in characters and not in 
pixels. ‘framebuffer_bpp’ is equal 16 (16 bits per character) and ‘framebuffer_pitch’ is 
expressed in bytes per text line. All further values of ‘framebuffer_type’ are reserved for 
future expansion 


3.6.13 EFI 32-bit system table pointer 


+------------------- + 
u32 | type = 11 | 
u32 | size = 12 | 
u32 | pointer | 

+------------------- + 


This tag contains pointer to i386 EFI system table. 


3.6.14 EFI 64-bit system table pointer 


+------------------- + 
u32 | type = 12 | 
u32 | size = 16 | 
u64 | pointer | 

+------------------- + 


This tag contains pointer to amd64 EFI system table. 
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3.6.15 SMBIOS tables 


4$------------------- + 
u32 | type = 13 | 
u32 | size | 
u8 | major | 
u8s | minor | 
u8 [6] | reserved | 

| smbios tables | 

4$------------------- + 


This tag contains a copy of SMBIOS tables as well as their version. 


3.6.16 ACPI old RSDP 


+------------------- + 
u32 | type = 14 | 
u32 | size | 
| copy of RSDPv1 | 
+------------------- + 


This tag contains a copy of RSDP as defined per ACPI 1.0 specification. 
3.6.17 ACPI new RSDP 


+------------------- + 
u32 | type = 15 | 
u32 | size | 
| copy of RSDPv2 | 
+------------------- + 


This tag contains a copy of RSDP as defined per ACPI 2.0 or later specification. 


3.6.18 Networking information 


poo----------------- + 
u32 | type = 16 | 
u32 | size | 
| DHCP ACK | 
poo----------------- + 


This tag contains network information in the format specified as DHCP. It may be 
either a real DHCP reply or just the configuration info in the same format. This tag appears 
once per card. 


3.6.19 EFI memory map 


$------------------- + 

u32 | type = 17 | 

u32 | size | 

u32 | descriptor size | 

u32 | descriptor version| 
| 


EFI memory map | 
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This tag contains EFI memory map as per EFI specification. 


This tag may not be provided by some boot loaders on EFI platforms if EFI boot 
services are enabled and available for the loaded image (EFI boot services not terminated 
tag exists in Multiboot2 information structure). 


3.6.20 EFI boot services not terminated 


This tag indicates ExitBootServices wasn’t called 


3.6.21 EFI 32-bit image handle pointer 


$------------------- + 
u32 | type = 19 | 
u32 | size = 12 | 
u32 | pointer | 

$------------------- + 


This tag contains pointer to EFI i386 image handle. Usually it is boot loader image 
handle. 


3.6.22 EFI 64-bit image handle pointer 


+------------------- + 
u32 | type = 20 | 
u32 | size = 16 | 
u64 | pointer | 

$------------------- + 


This tag contains pointer to EFI amd64 image handle. Usually it is boot loader 
image handle. 


3.6.23 Image load base physical address 


4$------------------- + 
u32 | type = 21 | 
u32 | size = 12 | 
u32 | load_base_addr | 


This tag contains image load base physical address. It is provided only if image has 
relocatable header tag. 
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4 Examples 


Caution: The following items are not part of the specification document, but are included 
for prospective operating system and boot loader writers. 


4.1 C structure members alignment and padding 
consideration 


It is preferred that the structures used for communication between the bootloader and the 
OS image conform to chosen ABI for a given architecture. If it is not possible then GCC 
‘__attribute__ ((__packed__))’ (or anything else which has similar meaning for chosen 
C compiler) have to be added to relevant structures definitions to avoid spurious, in this 
case, padding and alignment. 


4.2 Notes on PC 


In reference to bit 0 of the ‘flags’ parameter in the Multiboot2 information structure, if 
the bootloader in question uses older BIOS interfaces, or the newest ones are not available 
(see description about bit 6), then a maximum of either 15 or 63 megabytes of memory 
may be reported. It is highly recommended that boot loaders perform a thorough memory 
probe. 


In reference to bit 1 of the ‘flags’ parameter in the Multiboot2 information structure, 
it is recognized that determination of which BIOS drive maps to which device driver in an 
operating system is non-trivial, at best. Many kludges have been made to various operating 
systems instead of solving this problem, most of them breaking under many conditions. 
To encourage the use of general-purpose solutions to this problem, there are 2 BIOS device 
mapping techniques (see Section 4.3 [BIOS device mapping techniques], page 21). 


In reference to bit 6 of the ‘flags’ parameter in the Multiboot2 information structure, 
it is important to note that the data structure used there (starting with ‘BaseAddrLow’) is 
the data returned by the INT 15h, AX=E820h — Query System Address Map call. See 
See Section “Query System Address Map” in The GRUB Manual, for more information. 
The interface here is meant to allow a boot loader to work unmodified with any reasonable 
extensions of the BIOS interface, passing along any extra data to be interpreted by the 
operating system as desired. 


4.3 BIOS device mapping techniques 


Both of these techniques should be usable from any PC operating system, and neither 
require any special support in the drivers themselves. This section will be flushed out into 
detailed explanations, particularly for the I/O restriction technique. 


The general rule is that the data comparison technique is the quick and dirty solution. 
It works most of the time, but doesn’t cover all the bases, and is relatively simple. 


The I/O restriction technique is much more complex, but it has potential to solve 
the problem under all conditions, plus allow access of the remaining BIOS devices when not 
all of them have operating system drivers. 


22 Multiboot2 Specification version 2.0 


4.3.1 Data comparison technique 


Before activating any of the device drivers, gather enough data from similar sectors on each 
of the disks such that each one can be uniquely identified. 


After activating the device drivers, compare data from the drives using the operating 
system drivers. This should hopefully be sufficient to provide such a mapping. 


Problems: 


1. The data on some BIOS devices might be identical (so the part reading the drives from 
the BIOS should have some mechanism to give up). 


2. There might be extra drives not accessible from the BIOS which are identical to some 
drive used by the BIOS (so it should be capable of giving up there as well). 


4.3.2 I/O restriction technique 


This first step may be unnecessary, but first create copy-on-write mappings for the device 
drivers writing into PC RAM. Keep the original copies for the clean BIOS virtual machine to 
be created later. 


For each device driver brought online, determine which BIos devices become inac- 
cessible by: 


1. Create a clean BIOS virtual machine. 


2. Set the I/O permission map for the I/O area claimed by the device driver to no per- 
missions (neither read nor write). 


3. Access each device. 


4. Record which devices succeed, and those which try to access the restricted I/O areas 
(hopefully, this will be an xor situation). 


For each device driver, given how many of the BIOS devices were subsumed by it 
(there should be no gaps in this list), it should be easy to determine which devices on the 
controller these are. 


In general, you have at most 2 disks from each controller given BIOS numbers, but 
they pretty much always count from the lowest logically numbered devices on the controller. 


4.4 Example OS code 


In this distribution, the example Multiboot2 kernel kernel is included. The kernel just 
prints out the Multiboot2 information structure on the screen, so you can make use of the 
kernel to test a Multiboot2-compliant boot loader and for reference to how to implement a 
Multiboot2 kernel. The source files can be found under the directory doc in the Multiboot2 
source distribution. 


The kernel kernel consists of only three files: boot .S, kernel.c and multiboot2.h. 
The assembly source boot.S is written in GAS (see Section “GNU assembler” in The 
GNU assembler), and contains the Multiboot2 information structure to comply with the 
specification. When a Multiboot2-compliant boot loader loads and execute it, it initialize 
the stack pointer and EFLAGS, and then call the function cmain defined in kernel.c. If 
cmain returns to the callee, then it shows a message to inform the user of the halt state and 
stops forever until you push the reset key. The file kernel.c contains the function cmain, 
which checks if the magic number passed by the boot loader is valid and so on, and some 


Chapter 4: Examples 23 


functions to print messages on the screen. The file multiboot2.h defines some macros, 
such as the magic number for the Multiboot2 header, the Multiboot2 header structure and 
the Multiboot2 information structure. 


4.4.1 multiboot2.h 
This is the source code in the file multiboot2.h: 


/* multiboot2.h - Multiboot 2 header file. */ 
/* Copyright (C) 1999,2003,2007,2008,2009,2010 Free Software Foundation, Inc. 
* 


Permission is hereby granted, free of charge, to any person obtaining a copy 
of this software and associated documentation files (the "Software"), to 
deal in the Software without restriction, including without limitation the 
rights to use, copy, modify, merge, publish, distribute, sublicense, and/or 
sell copies of the Software, and to permit persons to whom the Software is 
furnished to do so, subject to the following conditions: 


The above copyright notice and this permission notice shall be included in 
all copies or substantial portions of the Software. 


* * * * * *¥* ¥ **¥ * * 


* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EX- 


PRESS OR 
* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, 


* FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL. 
* DEVELOPER OR DISTRIBUTOR BE LIABLE FOR ANY CLAIM, DAM- 

AGES OR OTHER LIABILITY, 

* WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARIS- 

ING FROM, OUT OF OR 

* IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEAL- 

INGS IN THE SOFTWARE. 
*/ 


#ifndef MULTIBOOT_HEADER 
#define MULTIBOOT_HEADER 1 


/* How many bytes from the start of the file we search for the header. */ 
#define MULTIBOOT_SEARCH 32768 
#define MULTIBOOT_HEADER_ALIGN 8 


/* The magic field should contain this. */ 
#define MULTIBOOT2_HEADER_MAGIC 0xe85250d6 


/* This should be in %eax. */ 
#define MULTIBOOT2_BOOTLOADER_MAGIC 0x36d76289 


/* Alignment of multiboot modules. */ 
#define MULTIBOOT_MOD_ALIGN 0x00001000 
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/* Alignment of the multiboot info structure. */ 
#define MULTIBOOT_INFO_ALIGN 0x00000008 


/* Flags set in the ‘flags’ member of the multiboot header. */ 


#define MULTIBOOT_TAG_ALIGN 8 
#define MULTIBOOT_TAG_TYPE_END 0 
#define MULTIBOOT_TAG_TYPE_CMDLINE 1 
#define MULTIBOOT_TAG_TYPE_BOOT_LOADER_NAME 2 
#define MULTIBOOT_TAG_TYPE_MODULE 3 
#define MULTIBOOT_TAG_TYPE_BASIC_MEMINFO 4 
#define MULTIBOOT_TAG_TYPE_BOOTDEV 5 
#define MULTIBOOT_TAG_TYPE_MMAP 6 
#define MULTIBOOT_TAG_TYPE_VBE 7 
#define MULTIBOOT_TAG_TYPE_FRAMEBUFFER 8 
#define MULTIBOOT_TAG_TYPE_ELF_SECTIONS 9 
#define MULTIBOOT_TAG_TYPE_APM 10 
#define MULTIBOOT_TAG_TYPE_EFI32 11 
#define MULTIBOOT_TAG_TYPE_EFI64 12 
#define MULTIBOOT_TAG_TYPE_SMBIOS 13 
#define MULTIBOOT_TAG_TYPE_ACPI_OLD 14 
#define MULTIBOOT_TAG_TYPE_ACPI_NEW 15 
#define MULTIBOOT_TAG_TYPE_NETWORK 16 
#define MULTIBOOT_TAG_TYPE_EFI_MMAP 17 
#define MULTIBOOT_TAG_TYPE_EFI_BS 18 
#define MULTIBOOT_TAG_TYPE_EFI32_1H 19 
#define MULTIBOOT_TAG_TYPE_EF1I64_1H 20 
#define MULTIBOOT_TAG_TYPE_LOAD_BASE_ADDR 21 


#define MULTIBOOT_HEADER_TAG_END 0 

#define MULTIBOOT_HEADER_TAG_INFORMATION_REQUEST 1 
#define MULTIBOOT_HEADER_TAG_ADDRESS 2 

#define MULTIBOOT_HEADER_TAG_ENTRY_ADDRESS 3 
#define MULTIBOOT_HEADER_TAG_CONSOLE_FLAGS 4 
#define MULTIBOOT_HEADER_TAG_FRAMEBUFFER 5 

#define MULTIBOOT_HEADER_TAG_MODULE_ALIGN 6 
#define MULTIBOOT_HEADER_TAG_EFI_BS 7 
#define MULTIBOOT_HEADER_TAG_ENTRY_ADDRESS_EFI32 8 
#define MULTIBOOT_HEADER_TAG_ENTRY_ADDRESS_EFI64 9 
#define MULTIBOOT_HEADER_TAG_RELOCATABLE 10 


#define MULTIBOOT_ARCHITECTURE_I386 0 
#define MULTIBOOT_ARCHITECTURE_MIPS32 4 
#define MULTIBOOT_HEADER_TAG_OPTIONAL 1 


#define MULTIBOOT_LOAD_PREFERENCE_NONE 0 
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#define MULTIBOOT_LOAD_PREFERENCE_LOW 1 
#define MULTIBOOT_LOAD_PREFERENCE_HIGH 2 


#define MULTIBOOT_CONSOLE_FLAGS_CONSOLE_REQUIRED 1 
#define MULTIBOOT_CONSOLE_FLAGS_EGA_TEXT_SUPPORTED 2 


#ifndef ASM_FILE 


typedef unsigned char multiboot_uint8_t; 
typedef unsigned short multiboot_uint16_t; 
typedef unsigned int multiboot_uint32_t; 
typedef unsigned long long multiboot_uint64_t; 


struct multiboot_header 


{ 
/* Must be MULTIBOOT_MAGIC - see above. */ 


multiboot_uint32_t magic; 


/* ISA x*/ 


multiboot_uint32_t architecture; 


/* Total header length. */ 
multiboot_uint32_t header_length; 


/* The above fields plus this one must equal 0 mod 2732. */ 
multiboot_uint32_t checksum; 


3; 


struct multiboot_header_tag 
{ 
multiboot_uinti6_t type; 
multiboot_uinti6_t flags; 
multiboot_uint32_t size; 


3; 


struct multiboot_header_tag_information_request 
{ 

multiboot_uinti6_t type; 

multiboot_uinti6_t flags; 

multiboot_uint32_t size; 

multiboot_uint32_t requests [0]; 
I; 


struct multiboot_header_tag_address 
{ 
multiboot_uinti6_t type; 
multiboot_uint16_t flags; 
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3; 


multiboot_uint32_t 
multiboot_uint32_t 
multiboot_uint32_t 
multiboot_uint32_t 
multiboot_uint32_t 
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size; 
header_addr; 
load_addr; 
load_end_addr; 
bss_end_addr; 


struct multiboot_header_tag_entry_address 


{ 


3; 


multiboot_uint16_t 
multiboot_uint16_t 
multiboot_uint32_t 
multiboot_uint32_t 


type; 
flags; 
size; 
entry_addr ; 


struct multiboot_header_tag_console_flags 


{ 


3; 


multiboot_uint16_t 
multiboot_uint16_t 
multiboot_uint32_t 
multiboot_uint32_t 


type; 

flags; 

size; 
console_flags; 


struct multiboot_header_tag_framebuffer 


{ 


3; 


multiboot_uint16_t 
multiboot_uint16_t 
multiboot_uint32_t 
multiboot_uint32_t 
multiboot_uint32_t 
multiboot_uint32_t 


type; 
flags; 
size; 
width; 
height ; 
depth; 


struct multiboot_header_tag_module_align 


{ 


3; 


multiboot_uinti6_t 
multiboot_uinti6_t 
multiboot_uint32_t 


type; 
flags; 
size; 


struct multiboot_header_tag_relocatable 


{ 


multiboot_uint16_t 
multiboot_uint16_t 
multiboot_uint32_t 
multiboot_uint32_t 
multiboot_uint32_t 


type; 
flags; 
size; 
min_addr; 
max_addr; 
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multiboot_uint32_t align; 
multiboot_uint32_t preference; 


3; 


struct multiboot_color 

{ 
multiboot_uint8_t red; 
multiboot_uint8_t green; 
multiboot_uint8_t blue; 

fae 


struct multiboot_mmap_entry 
{ 
multiboot_uint64_t addr; 
multiboot_uint64_t len; 
#define MULTIBOOT_MEMORY_AVAILABLE 
#define MULTIBOOT_MEMORY_RESERVED 
#define MULTIBOOT_MEMORY_ACPI_RECLAIMABLE 
#define MULTIBOOT_MEMORY_NVS 
#define MULTIBOOT_MEMORY_BADRAM 
multiboot_uint32_t type; 
multiboot_uint32_t zero; 
ae 


typedef struct multiboot_mmap_entry multiboot_memory_map_t; 


oP WN B& 


struct multiboot_tag 

{ 
multiboot_uint32_t type; 
multiboot_uint32_t size; 


3; 


struct multiboot_tag_string 

{ 
multiboot_uint32_t type; 
multiboot_uint32_t size; 
char string[0]; 

3; 


struct multiboot_tag_module 

a 
multiboot_uint32_t type; 
multiboot_uint32_t size; 
multiboot_uint32_t mod_start; 
multiboot_uint32_t mod_end; 
char cmdline[0]; 
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struct multiboot_tag_basic_meminfo 
{ 
multiboot_uint32_t type; 
multiboot_uint32_t size; 
multiboot_uint32_t mem_lower; 
multiboot_uint32_t mem_upper; 


3; 


struct multiboot_tag_bootdev 

{ 
multiboot_uint32_t type; 
multiboot_uint32_t size; 
multiboot_uint32_t biosdev; 
multiboot_uint32_t slice; 
multiboot_uint32_t part; 

a5 


struct multiboot_tag_mmap 

a 
multiboot_uint32_t type; 
multiboot_uint32_t size; 
multiboot_uint32_t entry_size; 
multiboot_uint32_t entry_version; 
struct multiboot_mmap_entry entries[0]; 


3; 


struct multiboot_vbe_info_block 
{ 


multiboot_uint8_t external_specification[512] ; 


3; 


struct multiboot_vbe_mode_info_block 
{ 


multiboot_uint8_t external_specification[256] ; 


3; 


struct multiboot_tag_vbe 
{ 
multiboot_uint32_t type; 
multiboot_uint32_t size; 


multiboot_uint1i6_t vbe_mode; 

multiboot_uint1i6_t vbe_interface_seg; 
multiboot_uint1i6_t vbe_interface_off; 
multiboot_uinti6_t vbe_interface_len; 


struct multiboot_vbe_info_block vbe_control_info; 
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struct multiboot_vbe_mode_info_block vbe_mode_info; 


3; 


struct multiboot_tag_framebuffer_common 


{ 


multiboot_uint32_t type; 
multiboot_uint32_t size; 


multiboot_uint64_t framebuffer_addr; 
multiboot_uint32_t framebuffer_pitch; 
multiboot_uint32_t framebuffer_width; 
multiboot_uint32_t framebuffer_height ; 
multiboot_uint8_t framebuffer_bpp; 

#define MULTIBOOT_FRAMEBUFFER_TYPE_INDEXED 0 

#define MULTIBOOT_FRAMEBUFFER_TYPE_RGB 1 

#define MULTIBOOT_FRAMEBUFFER_TYPE_EGA_TEXT 2 
multiboot_uint8_t framebuffer_type; 
multiboot_uinti6_t reserved; 


3; 


struct multiboot_tag_framebuffer 


{ 


struct multiboot_tag_framebuffer_common common; 


union 


4 


struct 


{ 


multiboot_uint1i6_t framebuffer_palette_num_colors; 
struct multiboot_color framebuffer_palette[0] ; 


r4 

struct 

{ 
multiboot_uint8_t 
multiboot_uint8_t 
multiboot_uint8_t 
multiboot_uint8_t 
multiboot_uint8_t 
multiboot_uint8_t 


framebuffer_red_field_position; 
framebuffer_red_mask_size; 
framebuffer_green_field_position; 
framebuffer_green_mask_size; 
framebuffer_blue_field_position; 
framebuffer_blue_mask_size; 


struct multiboot_tag_elf_sections 


{ 


multiboot_uint32_t type; 
multiboot_uint32_t size; 
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multiboot_uint32_t num; 
multiboot_uint32_t entsize; 
multiboot_uint32_t shndx; 
char sections [0]; 


3; 


struct multiboot_tag_apm 

di 
multiboot_uint32_t type; 
multiboot_uint32_t size; 
multiboot_uint1i6_t version; 
multiboot_uinti6_t cseg; 
multiboot_uint32_t offset; 
multiboot_uinti6_t cseg_16; 
multiboot_uinti6_t dseg; 
multiboot_uinti6_t flags; 
multiboot_uinti6_t cseg_len; 
multiboot_uinti6_t cseg_16_len; 
multiboot_uinti6_t dseg_len; 

3; 


struct multiboot_tag_efi32 

{ 
multiboot_uint32_t type; 
multiboot_uint32_t size; 
multiboot_uint32_t pointer; 


3; 


struct multiboot_tag_efi64 

{ 
multiboot_uint32_t type; 
multiboot_uint32_t size; 
multiboot_uint64_t pointer; 


3; 


struct multiboot_tag_smbios 

nf 
multiboot_uint32_t type; 
multiboot_uint32_t size; 
multiboot_uint8_t major; 
multiboot_uint8_t minor; 
multiboot_uint8_t reserved[6] ; 
multiboot_uint8_t tables([0]; 

i 


struct multiboot_tag_old_acpi 
{ 
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3; 


4: Examples 


multiboot_uint32_t type; 
multiboot_uint32_t size; 
multiboot_uint8_t rsdp[0]; 


struct multiboot_tag_new_acpi 


a! 


3; 


multiboot_uint32_t type; 
multiboot_uint32_t size; 
multiboot_uint8_t rsdp[0]; 


struct multiboot_tag_network 


{ 


3; 


multiboot_uint32_t type; 
multiboot_uint32_t size; 
multiboot_uint8_t dhcpack[0]; 


struct multiboot_tag_efi_mmap 


3: 


3; 


multiboot_uint32_t type; 
multiboot_uint32_t size; 
multiboot_uint32_t descr_size; 
multiboot_uint32_t descr_vers; 
multiboot_uint8_t efi_mmap[0]; 


struct multiboot_tag_efi32_ih 


{ 


3; 


multiboot_uint32_t type; 
multiboot_uint32_t size; 
multiboot_uint32_t pointer; 


struct multiboot_tag_efi64_ih 


{ 


3; 


multiboot_uint32_t type; 
multiboot_uint32_t size; 
multiboot_uint64_t pointer; 


struct multiboot_tag_load_base_addr 


{ 


multiboot_uint32_t type; 
multiboot_uint32_t size; 
multiboot_uint32_t load_base_addr; 
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i 
#Hendif /* ! ASM_FILE */ 


#Hendif /* ! MULTIBOOT_HEADER */ 


4.4.2 boot.S 
In the file boot .S: 


/* boot.S - bootstrap the kernel */ 
/* Copyright (C) 1999, 2001, 2010 Free Software Foundation, Inc. 
* 


* This program is free software: you can redistribute it and/or modify 

* it under the terms of the GNU General Public License as published by 
* the Free Software Foundation, either version 3 of the License, or 

* (at your option) any later version. 

* 


* This program is distributed in the hope that it will be useful, 

* but WITHOUT ANY WARRANTY; without even the implied warranty of 

* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 
* GNU General Public License for more details. 

* 

* You should have received a copy of the GNU General Public License 

* along with this program. If not, see <http://www.gnu.org/licenses/>. 


*/ 


#define ASM_FILE an 
#include <multiboot2.h> 


/* C symbol format. HAVE_ASM_USCORE is defined by configure. */ 
#ifdef HAVE_ASM_USCORE 


# define EXT_C(sym) _ ## sym 
#telse 

# define EXT_C(sym) sym 
#endif 


/* The size of our stack (16KB). */ 
#define STACK_SIZE 0x4000 


/* The flags for the Multiboot header. */ 
#ifdef __ELF__ 

# define AOUT_KLUDGE 0 

#else 

# define AOUT_KLUDGE MULTIBOOT_AOUT_KLUDGE 
#endif 


. text 
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-globl start, _start 
start: 
_start: 

jmp multiboot_entry 


/* Align 64 bits boundary. */ 
-align 8 


/* Multiboot header. */ 
multiboot_header: 
/* magic */ 
.long MULTIBOOT2_HEADER_MAGIC 
/* ISA: 1386 */ 
.long GRUB_MULTIBOOT_ARCHITECTURE_I386 
/* Header length. */ 
.long multiboot_header_end - multiboot_header 
/* checksum */ 
.long -(MULTIBOOT2_HEADER_MAGIC + GRUB_MULTIBOOT_ARCHITECTURE_1I386 + (multib 
#ifndef __ELF__ 
address_tag_start: 
.short MULTIBOOT_HEADER_TAG_ADDRESS 
.short MULTIBOOT_HEADER_TAG_OPTIONAL 
.long address_tag_end - address_tag_start 
/* header_addr */ 
.long multiboot_header 
/* load_addr */ 
.long -_start 
/* load_end_addr */ 
.long -_edata 
/* bss_end_addr */ 
.long -_end 
address_tag_end: 
entry_address_tag_start: 
.short MULTIBOOT_HEADER_TAG_ENTRY_ADDRESS 
.short MULTIBOOT_HEADER_TAG_OPTIONAL 
.long entry_address_tag_end - entry_address_tag_start 
/* entry_addr */ 
.long multiboot_entry 
entry_address_tag_end: 
#endif /* -__ELF__ */ 
framebuffer_tag_start: 
.short MULTIBOOT_HEADER_TAG_FRAMEBUFFER 
.short MULTIBOOT_HEADER_TAG_OPTIONAL 
.long framebuffer_tag_end - framebuffer_tag_start 
.long 1024 
.long 768 
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.long 32 
framebuffer_tag_end: 
.short MULTIBOOT_HEADER_TAG_END 
.short 0 
.long 8 
multiboot_header_end: 
multiboot_entry: 
/* Initialize the stack pointer. */ 
movl $(stack + STACK_SIZE), “esp 


/* Reset EFLAGS. */ 
pushl $0 
popf 


/* Push the pointer to the Multiboot information structure. */ 
pushl ‘%ebx 

/* Push the magic value. */ 

pushl ‘eax 


/* Now enter the C main function... */ 
call EXT_C(cmain) 


/* Halt. */ 
pushl $halt_message 
call EXT_C(printf) 


loop: hlt 
jmp loop 


halt_message: 
-asciz "Halted." 


/* Our stack area. */ 
. comm stack, STACK_SIZE 


4.4.3 kernel.c 
And, in the file kernel .c: 


/* kernel.c - the C part of the kernel */ 
/* Copyright (C) 1999, 2010 Free Software Foundation, Inc. 
* 


* This program is free software: you can redistribute it and/or modify 

* it under the terms of the GNU General Public License as published by 
* the Free Software Foundation, either version 3 of the License, or 

* (at your option) any later version. 

* 


* This program is distributed in the hope that it will be useful, 
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* but WITHOUT ANY WARRANTY; without even the implied warranty of 
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 


* GNU General Public License for more details. 
k 


* You should have received a copy of the GNU General Public License 
* along with this program. If not, see <http://www.gnu.org/licenses/>. 
*/ 
#include "multiboot2.h" 


/* Macros. */ 


/* Some screen stuff. */ 
/* The number of columns. */ 


#define COLUMNS 80 

/* The number of lines. */ 

#define LINES 24 

/* The attribute of an character. */ 
#define ATTRIBUTE WA 

/* The video memory address. */ 

#define VIDEO O0xB8000 


/* Variables. */ 

/* Save the X position. */ 

static int xpos; 

/* Save the Y position. */ 

static int ypos; 

/* Point to the video memory. */ 

static volatile unsigned char *video; 


/* Forward declarations. */ 

void cmain (unsigned long magic, unsigned long addr); 
static void cls (void); 

static void itoa (char *buf, int base, int d); 
static void putchar (int c); 

void printf (const char *format, ...); 


/* Check if MAGIC is valid and print the Multiboot information structure 
pointed by ADDR. */ 

void 

cmain (unsigned long magic, unsigned long addr) 

{ 
struct multiboot_tag *tag; 
unsigned size; 


/* Clear the screen. */ 
cls (); 
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/* Am TI booted by a Multiboot-compliant boot loader? */ 
if (magic != MULTIBOOT2_BOOTLOADER_MAGIC) 


x 
printf ("Invalid magic number: Ox%x\n", (unsigned) magic) ; 
return; 

} 

if (addr & 7) 

{ 
printf ("Unaligned mbi: Ox%x\n", addr); 
return; 

} 


size = *(unsigned *) addr; 
printf ("Announced mbi size Ox%x\n", size); 
for (tag = (struct multiboot_tag *) (addr + 8); 
tag->type != MULTIBOOT_TAG_TYPE_END; 
tag = (struct multiboot_tag *) ((multiboot_uint8_t *) tag 
+ ((tag->size + 7) & ~7))) 
{ 
printf ("Tag Ox4x, Size Ox%x\n", tag->type, tag->size) ; 
switch (tag->type) 
{ 
case MULTIBOOT_TAG_TYPE_CMDLINE: 
printf ("Command line = %s\n", 
((struct multiboot_tag_string *) tag)->string) ; 
break; 
case MULTIBOOT_TAG_TYPE_BOOT_LOADER_NAME: 
printf ("Boot loader name = %s\n", 
((struct multiboot_tag_string *) tag)->string) ; 
break; 
case MULTIBOOT_TAG_TYPE_MODULE: 
printf ("Module at Ox%x-Ox%x. Command line %s\n", 
((struct multiboot_tag_module *) tag)->mod_start, 
((struct multiboot_tag_module *) tag)->mod_end, 
((struct multiboot_tag_module *) tag)->cmdline) ; 
break; 
case MULTIBOOT_TAG_TYPE_BASIC_MEMINFO: 
printf ("mem_lower = %uKB, mem_upper = %uKB\n", 
((struct multiboot_tag_basic_meminfo *) tag)->mem_lower, 
((struct multiboot_tag_basic_meminfo *) tag)->mem_upper) ; 
break; 
case MULTIBOOT_TAG_TYPE_BOOTDEV: 
printf ("Boot device Ox%x,Zu,/u\n", 
((struct multiboot_tag_bootdev *) tag)->biosdev, 
((struct multiboot_tag_bootdev *) tag)->slice, 
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((struct multiboot_tag_bootdev *) tag)->part); 
break; 
case MULTIBOOT_TAG_TYPE_MMAP: 
{ 


multiboot_memory_map_t *mmap; 
printf ("mmap\n") ; 


for (mmap = ((struct multiboot_tag_mmap *) tag)->entries; 
(multiboot_uint8_t *) mmap 
< (multiboot_uint8_t *) tag + tag->size; 
mmap = (multiboot_memory_map_t *) 
(Cunsigned long) mmap 
+ ((struct multiboot_tag_mmap *) tag)->entry_size)) 
printf (" base_addr = Ox%/x%x," 
" length = Ox/x%x, type = Ox%x\n", 
(unsigned) (mmap->addr >> 32), 
(unsigned) (mmap->addr & Oxffffffff), 
(unsigned) (mmap->len >> 32), 
(unsigned) (mmap->len & Oxffffffff), 
(unsigned) mmap->type) ; 
} 
break; 
case MULTIBOOT_TAG_TYPE_FRAMEBUFFER: 
{ 
multiboot_uint32_t color; 
unsigned i; 
struct multiboot_tag_framebuffer *tagfb 
= (struct multiboot_tag_framebuffer *) tag; 
void *fb = (void *) (unsigned long) tagfb->common.framebuffer_addr; 


switch (tagfb->common.framebuffer_type) 
{ 
case MULTIBOOT_FRAMEBUFFER_TYPE_INDEXED: 
5! 
unsigned best_distance, distance; 
struct multiboot_color *palette; 


palette = tagfb->framebuffer_palette; 


color = 0; 
best_distance = 4*256*256; 


for (i = 0; i < tagfb->framebuffer_palette_num_colors; i++) 
{ 
distance = (Oxff - palette[i] .blue) 
* (Oxff - palette[i] .blue) 
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+ palette[i].red * palette[i].red 
+ palette[i].green * palette[i] .green; 
if (distance < best_distance) 
{ 
color = i; 
best_distance = distance; 


} 
} 


break; 


case MULTIBOOT_FRAMEBUFFER_TYPE_RGB: 
color = ((1 << tagfb->framebuffer_blue_mask_size) - 1) 
<< tagfb->framebuffer_blue_field_position; 
break; 


case MULTIBOOT_FRAMEBUFFER_TYPE_EGA_ TEXT: 
color = ’\\’ | 0x0100; 
break; 


default: 
color = Oxffffffff; 
break; 


} 


for (i = 0; i < tagfb->common.framebuffer_width 
&& i < tagfb->common.framebuffer_height; i++) 


{ 
switch (tagfb->common.framebuffer_bpp) 
af 
case 8: 
{ 
multiboot_uint8_t *pixel = fb 
+ tagfb->common.framebuffer_pitch * i + i; 
*pixel = color; 
bs 
break; 
case 15: 
case 16: 
{ 
multiboot_uinti6_t *pixel 
= fb + tagfb->common.framebuffer_pitch * i + 2 * i; 
*pixel = color; 
t 
break; 
case 24: 


{ 
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multiboot_uint32_t *pixel 
= fb + tagfb->common.framebuffer_pitch * 1+ 3 * i; 
*pixel = (color & Oxffffff) | (*pixel & Oxf£000000) ; 
t 
break; 


case 32: 
{ 
multiboot_uint32_t *pixel 
= fb + tagfb->common.framebuffer_pitch * i + 4 * i; 
*pixel = color; 
} 
break; 


tag = (struct multiboot_tag *) ((multiboot_uint8_t *) tag 
+ ((tag->size + 7) & ~7)); 
printf ("Total mbi size Ox%x\n", (unsigned) tag - addr); 
ii 


/* Clear the screen and initialize VIDEO, XPOS and YPOS. */ 
static void 

cls (void) 

{ 


int i; 
video = (unsigned char *) VIDEO; 


for (i = 0; i < COLUMNS * LINES * 2; i++) 
*(video + i) = 0; 


xpos = 0; 
ypos = 0; 
} 


/* Convert the integer D to a string and save the string in BUF. If 
BASE is equal to ’d’, interpret that D is decimal, and if BASE is 
equal to ’x’, interpret that D is hexadecimal. */ 

static void 

itoa (char *buf, int base, int d) 

{ 
char *p = buf; 
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/* 
static void 
putchar (int c) 
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char *pl, *p2; 
unsigned long ud = d; 
int divisor = 10; 


/* If %d is specified and D is minus, put ‘-’ in the head. */ 


if (base == ’d’ && d < 0) 
{ 


epPPh oS: Vass 
buf++; 
ud = -d; 
+ 
else if (base == ’x’) 
divisor = 16; 


/* Divide UD by DIVISOR until UD == 0. */ 
do 
a 


int remainder = ud % divisor; 


*pt+ = (remainder < 10) ? remainder + ’0’ 
is 


while (ud /= divisor) ; 


/* Terminate BUF. */ 
*p = 0; 


/* Reverse BUF. */ 


pi = buf; 
p2=p- 1; 
while (pl < p2) 
{ 
char tmp = *p1; 
*pl = ¥*p2; 
*p2 = tmp; 
pitt; 
p2--; 
} 
Put the character C on the screen. */ 


if (c == ’\n’ || c == ’\r’) 
{ 
newline: 
xpos = 0; 


: remainder + ’a’ - 10; 
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ypo st+t+ 5 
if (ypos >= LINES) 
ypos = 0; 
return; 
} 


*(video + (xpos + ypos * COLUMNS) * 2) = c & OxFF; 
*(video + (xpos + ypos * COLUMNS) * 2 + 1) = ATTRIBUTE; 


xXpost+; 
if (xpos >= COLUMNS) 
goto newline; 


ts 


/* Format a string and print it on the screen, just like the libc 
function printf. */ 
void 
printf (const char *format, ...) 
{ 
char **arg = (char **) &format; 
int c; 
char buf [20]; 


argt+; 
while ((c = *format++) != 0) 
a 
if (c t= ?%) 
putchar (c); 
else 
{ 


char *p, *p2; 
int padO = 0, pad = 0; 


c = *formatt+; 
if (c == ’0’) 
re 
padoO = 1; 
c = *formattt; 


if (c >= ’0’ && c <= ’9’) 


pad =c - ’0’; 
c = *formattt+; 
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switch (c) 

1 

case ’d’: 

case ’u’: 

case ’x’: 
itoa (buf, c, *((int *) argt+)); 
p = buf; 
goto string; 
break; 


case ’s?’: 
p = *argt+t+; 
Af py 
p = "(null)"; 


string: 
for (p2 = p; *p2; p2++); 
for (; p2 < p + pad; p2++) 
putchar (padO ? 70’ : ’ ’); 
while (*p) 
putchar (*pt++); 
break; 


default: 
putchar (*((int *) argt+)); 
break; 


z 


i, 


4.4.4 Other Multiboot2 kernels 


Other useful information should be available in Multiboot2 kernels, such as GNU Mach and 
Fiasco http://os.inf.tu-dresden.de/fiasco/. And, it is worth mentioning the OSKit 
http: //www.cs.utah.edu/projects/flux/oskit/, which provides a library supporting 
the specification. 


4.5 Example boot loader code 


The GNU GRUB (see Section “GRUB” in The GRUB manual) project is a Multiboot2- 
compliant boot loader, supporting all required and many optional features present in this 
specification. A public release has not been made, but the test release is available from: 


ftp://alpha. gnu. org/gnu/grub 


See the webpage http://www. gnu. org/software/grub/grub.html, for more infor- 
mation. 
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5 The change log of this specification 


0.7 


0.6 


0.5 


0.4 


Multiboot2 Standard is renamed to Multiboot2 Specification. 
Graphics fields are added to Multiboot2 header. 


BIOS drive information, BIOS configuration table, the name of a boot 
loader, APM information, and graphics information are added to Multi- 
boot2 information. 


Rewritten in Texinfo format. 
Rewritten, using more strict words. 


The maintainer changes to the GNU GRUB maintainer team 
bug-grub@gnu. org, from Bryan Ford and Erich Stefan Boleyn. 


The byte order of the ‘boot_device’ in Multiboot2 information is reversed. 
This was a mistake. 


The offset of the address fields were wrong. 


The format is adapted to a newer Texinfo, and the version number is 
specified more explicitly in the title. 


A few wording changes. 
Header checksum. 


Classification of machine state passed to an operating system. 


Name change. 


Major changes plus HTMLification. 
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